# Bro Cluster using Vagrant Issues

**URL:** <https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034>\
**Category:** Zeek\
**Created:** [March 2, 2016, 9:01pm UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034 "2016-03-02T21:01:12Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Christopher\_De\_Jesus](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@Christopher\_De\_Jesus](https://community.zeek.org/u/Christopher_De_Jesus)\
**Post date:** [March 2, 2016, 9:01pm UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/1 "2016-03-02T21:01:12Z")

</div>

Hello, my name is Christopher and I’m doing undergrad research using Bro to make an IDS for one of the servers of my mentor.

One of my first approaches was to start doing this video: [https://www.youtube.com/watch?v=it7SZli61ZM](https://www.youtube.com/watch?v=it7SZli61ZM)

in which it setups a cluster using Vagrant. I’ve been struggling for at least 5 days trying to make it work. I’ve changed permissions, ssh-keys, etc.

The thing is that every time is use ‘broctl’ and do ‘install’ or ‘deploy’ on it… it says this:

Permission denied (publickey,password).

Error: cannot create (some of the) directories /nsm/bro,/nsm/bro/logs,/nsm/bro/spool,/nsm/bro/spool/tmp on node worker-1

I used this site to install bro on Ubuntu of Vagrant:

[http://knowm.org/how-to-install-bro-network-security-monitor-on-ubuntu/](http://knowm.org/how-to-install-bro-network-security-monitor-on-ubuntu/)

So yeah, apparently my host doesn’t have control over its slaves even tho’ I could ping to it. I used 10.2.2.10 for the host and 10.2.2.11 for the slave in the Vagrantfile.

Any other information that you guys need, let me know. This is pretty much the overview of what i’ve done. Thank you in advance.

---

<div class="post-metadata">

**Author:** ![Cristian\_Barbaro](https://avatars.discourse-cdn.com/v4/letter/c/9fc348/32.png) [@Cristian\_Barbaro](https://community.zeek.org/u/Cristian_Barbaro)\
**Post date:** [March 3, 2016, 12:09am UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/2 "2016-03-03T00:09:18Z")

</div>

Do you add ssh key of master in authorized\_keys file in workers into .ssh folder?  
Maybe here is the problem.

Sorry for my english.

---

<div class="post-metadata">

**Author:** ![Cristian\_Barbaro](https://avatars.discourse-cdn.com/v4/letter/c/9fc348/32.png) [@Cristian\_Barbaro](https://community.zeek.org/u/Cristian_Barbaro)\
**Post date:** [March 3, 2016, 12:09am UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/3 "2016-03-03T00:09:51Z")

</div>

Do you add ssh key of master in authorized\_keys file in workers into .ssh folder?  
Maybe here is the problem.

Sorry for my english.

---

<div class="post-metadata">

**Author:** ![Christopher\_De\_Jesus](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@Christopher\_De\_Jesus](https://community.zeek.org/u/Christopher_De_Jesus)\
**Post date:** [March 3, 2016, 4:35pm UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/4 "2016-03-03T16:35:31Z")

</div>

Well, that’s the thing. I did it. not sure if I did it right, but I did what i know of RSA. I made the sss-keygen, used that same key and copied it into the shared folder and with the slave I took it and put it in the .ssh. Is there another way of doing it? Besides, every time I tried to do ‘scp’ it asked for the root password of the slave which I think it’s a private key.

---

<div class="post-metadata">

**Author:** ![Cristian\_Barbaro](https://avatars.discourse-cdn.com/v4/letter/c/9fc348/32.png) [@Cristian\_Barbaro](https://community.zeek.org/u/Cristian_Barbaro)\
**Post date:** [March 4, 2016, 1:21pm UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/5 "2016-03-04T13:21:04Z")

</div>

You could make cat .ssh / id\_rsa.pub of master’s file and then paste it into .ssh / authorized\_keys file of each worker (if not exists, create it). Then you make sure if you can connect via ssh to each worker from master.  
Everything I do with root (in /root folder).

Saludos.

---

<div class="post-metadata">

**Author:** ![Jon\_Schipp](https://avatars.discourse-cdn.com/v4/letter/j/8797f3/32.png) [@Jon\_Schipp](https://community.zeek.org/u/Jon_Schipp)\
**Post date:** [March 11, 2016, 12:11am UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/6 "2016-03-11T00:11:07Z")

</div>

The linked Vagrant configuration was used in the video and has been recently updated - [https://github.com/jonschipp/vagrant/tree/master/bro-cluster](https://github.com/jonschipp/vagrant/tree/master/bro-cluster)  
It will provision a Bro cluster with 3 machines - 1x manager, 2x worker nodes. It automates the entire setup including the ssh configuration.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/bro-cluster-using-vagrant-issues/4034/7 "2022-05-06T15:43:27Z")

</div>


